Skip to content
SPECIFICTION
Get listed

AWS Secrets Manager vs dotenvx

AWS Secrets Manager

aws.amazon.com

dotenvx

dotenvx.com

Side by side

FigureAWS Secrets Managerdotenvx
Price from$0.40/mo$5/mo
Free planYesYes
Free trial—Yes
Open source——
WebYes—
Windows—Yes
macOS—Yes
Linux—Yes
APIYes—
Self-hosted—Yes
Plans published23
Spec score · Secrets Management Tools8.5 (#3)8.5 (#4)
EncryptionSecrets Manager encrypts secrets at rest with AWS Key Management Service keys and transmits retrieved secrets over TLS.Dotenvx uses public-key encryption with a secp256k1 key pair, keeping the private decryption key separate from the encrypted .env file.
PurposeAWS Secrets Manager manages access to applications, services, IT resources, database credentials, API keys, and other secrets throughout their lifecycle.Dotenvx encrypts secrets in .env files and decrypts and injects them at runtime for applications.

Plans

AWS Secrets Manager

  • AWS Free TierFree
  • Pay-as-you-go$0.40 a month

AWS Secrets Manager pricing →

dotenvx

  • Dotenvx UserFree
  • Member$5 a month
  • Business$90 a month

dotenvx pricing →

In their own words

AWS Secrets Manager

AWS Secrets Manager has no write-up on Specifiction yet; its figures are above.

Visit aws.amazon.com

dotenvx

dotenvx encrypts secrets stored in.env files, then decrypts and injects them when an application runs. Its maker describes it as free and open source, with hosted and self-hosted deployment options. Public-key encryption uses a secp256k1 key pair, keeping the private decryption key separate from the encrypted file. For development, the private key can be stored in the operating system’s secret store, including macOS Keychain, Windows Credential Manager, or Linux Secret Service. Listed workflow tools include environment selection and composition, validation, pre-commit leak prevention, Docker image protection, key/value operations, and runtime log redaction. The maker says encrypted files can travel with code and be decrypted at runtime using a private key supplied in the deployment environment, without a secrets service in the application’s critical path. Installation options include CLI, npm, winget, Homebrew, GitHub releases, Docker, a Ruby gem, and Python pip. Guides cover developer tools, programming languages, and deployment services. The free User plan includes CLI, SDKs, encryption, and GitHub Issues support. Member is $5 a month; Business is $90 a month. The paid product has a 14-day free trial.

Visit dotenvx.com